自动化接入 · API / MCP EN

技术说明 · T1027.017

SVG Smuggling

Adversaries may smuggle data and files past content filters by hiding malicious payloads inside of seemingly benign SVG files. SVGs, or Scalable Vector Graphics, are vector-based image files constructed using XML. As such, they can legitimately include `<script>` tags that enable adversaries to include malicious JavaScript payloads. However, SVGs may appear less suspicious to users than other types of executable files, as they are often treated as image files. SVG smuggling can take a number of forms. For example, threat actors may include content that: * Assembles malicious payloads * Downloads malicious payloads * Redirects users to malicious websites * Displays interactive content to users, such as fake login forms and download buttons. SVG Smuggling may be used in conjunction with HTML Smuggling where an SVG with a malicious payload is included inside an HTML file. SVGs may also be included in other types of documents, such as PDFs.

ATT&CK T1027.017 platforms — 状态 有效 版本 20.1

Adversaries may smuggle data and files past content filters by hiding malicious payloads inside of seemingly benign SVG files.1 SVGs, or Scalable Vector Graphics, are vector-based image files constructed using XML. As such, they can legitimately include `<script>` tags that enable adversaries to include malicious JavaScript payloads. However, SVGs may appear less suspicious to users than other types of executable files, as they are often treated as image files. SVG smuggling can take a number of forms. For example, threat actors may include content that: * Assembles malicious payloads2 * Downloads malicious payloads3 * Redirects users to malicious websites4 * Displays interactive content to users, such as fake login forms and download buttons.5 SVG Smuggling may be used in conjunction with HTML Smuggling where an SVG with a malicious payload is included inside an HTML file.6 SVGs may also be included in other types of documents, such as PDFs.

  1. Trustwave SVG Smuggling 2025
  2. Talos SVG Smuggling 2022
  3. Cofense SVG Smuggling 2024
  4. Bleeping Computer SVG Smuggling 2024
  5. Bleeping Computer SVG Smuggling 2024
  6. Talos SVG Smuggling 2022

使用该技术的组织

参考表中尚无组织使用记录。

断言

尚无指向该技术的公开断言。

记录自动入库·未人工复核；置信度与有效期按引用读取。